Quantum Property Testing-!- 



Harry Buhrman^ 



Lance Fortnow^ Ilan Newman H 
November 12, 2001 



Hein Rohrig^ 



(N 
O 
O 
(N 

a 

in 

(N 



Abstract 

A language L has a property tester if there exists a probabihstic algorithm that given an input 
X only asks a small number of bits of x and distinguishes the cases as to whether a: is in L and x has 
large Hamming distance from all y in L. We define a similar notion of quantum property testing 
and show that there exist languages with quantum property testers but no good classical testers. 
We also show there exist languages which require a large number of queries even for quantumly 
testing. 
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1 Introduction 

Suppose we have a large data set, for example, a large chunk of the world-wide web or a genomic 
sequence. We would like to test whether the data has a certain property, but we may not have the 
time to even look at the entire data set or even a large portion of it. 

To handle these types of problems, Rubinfeld and Sudan RS96|] and Goldreich, Goldwasser and 
Ron [GGR9J] have developed the notion of property testing. Testable properties come in many 
varieties including graph properties (e. g., [PGR98| , |AFKS99| , |FisOl4 |Fis01b|, [Alo01| , PT01|), alg ebraic 
properties of functions |BLR93| , |RS96| , |EKK+00i and regular languages lANKS99|| . Ron jRonOOl gives 
a nice survey of this area. 

In this model, the property tester has random access to the n input bits similar to the black-box 
oracle model. The tester can query only a small, usually some fixed constant, probabilistically-chosen 
set of bits of the input. Clearly we cannot determine from these small number of bits whether the 
input sits in some language L. However, for many languages we can distinguish the cases that the 
input is in L from whether the input differs from all inputs in L of the same length by some constant 
fraction of input bits. 

Since we have seen many examples where quantum computation gives us an advantage over classical 



computation | BV97 , Sim97 , 3ho97 , Gro9€ ] one may naturally ask whether using quantum computation 
may lead to better property testers. By using the quantum oracle-query model developed by Beals, 
Buhrman, Gleve, Mosca and de Wolf [1BBG+98|| , we can easily extend the definitions of property testing 
to the quantum setting. 



Beals, et. al. |BBC^9|] have shown that for all total functions we have a polynomial relationship 
between the number of queries required by quantum machine and that needed by a deterministic 
machine. For greater separations one needs to require a promise in the input and the known examples, 
such as those due to Simon [pim97 | and Bernstein- Vazirani |BV97], require considerable structure in 
the promise. In property testing there is a natural promise of either being in the language or far from 
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any input in the language. This promise would seem to have too little structure to give a separation 
but in fact we can prove that quantum property testing can greatly improve on classical testing. 

We show that any subset of Hadamard codes has a quantum property tester and most subsets 
would require 0(logn) queries to test with a probabilistic tester. This shows that indeed quantum 
property testers are more powerful than classical testers. Moreover, we also give an example of a 
language where the quantum tester is exponentially more efficient. 

Beals, et. al. |BBC+98| observed that any fc-query quantum algorithm gives rise to a degree-2fe 
polynomial in the input bits, which gives the acceptance probability of the algorithm; thus, a quantum 
property tester for P gives rise to a polynomial that is on all binary inputs between and 1, that is 
at least 2/3 on inputs with the property P and at most 1/3 on inputs far from having the property 
P. Szegedy [pze99 ] suggested to algebraically characterize the complexity of classical testing by the 
minimum degree of such polynomials; however, our separation results imply that there are for example 
properties, for which such polynomials have constant degree, but for which the best classical tester 
needs r2(logn) queries. 

Perhaps every language has a quantum property tester with a small number of queries. We show 
that this is not the case. We prove that for most properties of a certain size, any quantum algorithm 
requires ri(n) queries. We then show that a natural property, namely, the range of a d-wise independent 
pseudorandom generator cannot be quantumly tested with less than [d + l)/2 queries for any odd 
d <n/ log n — 1. 



2 Preliminaries 



Property testing was first developed by Rubinfeld and Sudan [[RS96| and Goldreich, Goldwasser and 



Ron [GGR98|. We will use the following formal definition of property testing from Goldreich |Gol98]. 



Definition 2.1 Let S he a finite set, and P a subset of functions mapping S to {0, 1}. A property 
tester for P is a probabilistic oracle machine M , which given a distance parameter e > and oracle 
access to an arbitrary function / : S" — > {0, 1}, satisfies the following conditions: 

1. the tester accepts f if it is in P: 

iffeP then Pr(M-^ (e) = 1) > - 

3 

2. the tester rejects f if it is far from P: 

if \{xeS : f{x) / g{x)]\ > e ■ \S\, for every gG P, then Pr(M^ (e) = 1) < ^ 



Definition 2.2 The complexity of the tester is the number of oracle queries it makes: A property P 
has a (e, g)-tester if there is a tester for P that makes at most q oracle queries for distance parameter 
e. 

We often consider a language L C {0, 1}* as the family of properties {Pn} with Pn the characteristic 
functions of the length-n strings from L, and analyze the query complexity q = g(e, n) asymptotically 
for large n. 

To define quantum property testing we simply modify Definition |2.1| by allowing M to be a quantum 
oracle machine. We need to be careful to make sure our oracle queries are unitary operations. If 
\f{x)\ = \g{y)\ for all x,y £ S and f,g £ P, we use the oracle-query model by Beals, Buhrman, 
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Cleve, Mosca and de Wolf [ |BBC^98 ]: we define the unitary transformation Of that maps the ba- 



sis state \x,y,z) to \x,y (B f{x), z) where |x| = [loglSI], \y\ = \ f{x)\ and © denotes bitwise exclu- 
sive or. In case there are x,y,f,g so that ^ \giy)\, we define Of as mapping \x,l,y,z) to 
|x, I + \f{x)\ mod k,y (B 0'^~l'^(^)l/(x), z) where k = max{|/(x)| : f G P and x G S}, \x\ = [log \S\] , 
\l\ = [log A;], and \y\ = k. 

We recommend the book of Nielsen and Chuang [ N"COC| ] for background information on quantum 



computing and the surveys of Ron |RonOO| and Goldreich |Gol98] for a background on property testing 



3 Separating Quantum and Classical Property Testing 

We show that there exist languages with (e, 0(1)) quantum property testers that do not have (e, 0(1)) 
classical testers. 

Theorem 3.1 There is a languages L that is e-testable by a quantum test with 0(1/ e) number of 
queries but for which any probabilistic 1/3-test requires r2(logn) queries. 

We use Hadamard codes to provide examples for Theorem |3 

Definition 3.2 The Hadamard code of y & {0, 1}^°S" is x = h{y) G {0, 1}" such that Xi = y ■ i where 
y ■ i denotes the inner product of two vectors y,i £ Fg"^". 

Note: the Hadamard mapping h : {0,1}^°^" — > {0,1}" is one-to-one. Bernstein and Vazirani |BV97[| 
showed that a quantum computer can extract y with one query to an oracle for (the bits of) x, 
whereas a classical probabilistic procedure needs Q{logn) queries. Based on this separation for a 
decision problem we construct for A C {0, 1}^°^" the property Pa Q {0, 1}", 

Pa := {x -.By £ a s.t. x = h{y)}. 



Theorem 3.1 follows from the following two lemmas. 



Lemma 3.3 For every A, Pa can be (e, 0{1/ e))-quantumly tested. Furthermore, the test has one-sided 
error. 



Lemma 3.4 For most A of size \ A\ = n/2, Pa requires i7(logn) queries for a probabilistic l/'i-test 
(even for testers with two-sided error.) 



Before we prove Lemma |3.3| we note that for any A, Pa can be tested by an (even nonadaptive) 



one-sided algorithm with 0(l/e + logn); hence, the result of Lemma 3.4 is tight. An 0(l/elogn)-test 
follows from Observation |3.5| below. The slightly more efficient test is the following: First we query 
X2i, i = 0, . . . ,logn. Note that \i x = h{y) then y.j = X2i for z = 0, . . . ,logn. Thus a candidate y for 
X = h{y) is found. If y ^ A then x is rejected. Then for k = 0(l/e) times independently a random 
index i £ {1, • • • ,n} is chosen and if Xj ^ y ■ i, for the candidate y that was found before, then x is 
rejected. Otherwise, x is accepted. Clearly if x is rejected then x ^ Pa- It is easily verified that if x 
has Hamming distance more than en from every z in Pa then with constant probability x is rejected. 



Proof of Lemma 3.3. Pa can be checked with 0(l/e) queries on a quantum computer: The test is 
similar to the test above except that y can be found in 0(1) queries: k times query for random i, j 
values Xi, xj, and Xj^j. If Xi © Xj / Xj^j reject, k = 0(l/e) is sufficient to detect an input x that 
is en-far from being a Hadamard codeword with high probability. Now run the Bernstein- Vazirani 
algorithm to obtain y. Accept if and only if y £ A. Obviously, if x G Pa, the given procedure accepts, 
and if x is far from any x' £ Pa, then it is either far from being a Hadamard codeword (which is 
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detected in the first step) or it is close to a Hadamard codeword h{y') for an y' A; note tliat in tliis 
case X is far from any h(y), y G yl as two distinct Hadamard codewords are of Hamming distance n/2. 
Thus, in this case the second part of the tester succeeds with high probabihty in finding y' and rejects 
because y' A. We note also that this algorithm has one-sided error. □ 



Proof of Lemma 3.4. The lower bound makes use of the Yao principle |Yao77]: let D be an arbitrary 



probability distribution on positive and negative inputs (i.e., inputs that either belong to Pa or are en- 
far from Pa)- Then if every deterministic algorithm that makes at most q queries, errs with probability 
at least 1/8 (with respect to input chosen according to D,) then g is a lower bound on the number of 
queries of any randomized algorithm for testing Pa with error probability bounded by 1/8. 

D will be the uniform distribution over Hadamard codewords of length n, namely, generated by 
choosing y G {0, uniformly at random and setting x = h{y). Note that for any A C {0, 
D is concentrated on positive and negative inputs as required, as two Hadamard codewords are of 
Hamming distance n/2 apart. 

The lower bound will be established by a counting argument. We show that for a fixed tester that 
makes q < (logn)/2 queries, the probability (over random choices of A) that the the algorithm errs 
on at most a 1/8-fraction of the inputs is bounded from above by 1/(10T) where T is the number of 
such algorithms. By the union bound it follows that for most properties there is no such algorithm. 

Indeed, let A C {0, 1}'°S" be chosen by picking independently each i G {0, 1}^°S"' to be in A with 
probability 1/2; this will not necessarily result in a set A of size n/2 but we can condition on the event 
that \A\ = n/2 and will not loose much. Let T be any fixed deterministic decision tree performing 
at most q queries in every branch. Then let c(T) := {y\T{h{y)) = accept} and let /x(T) := \c{T)\/n, 
i.e., //(T) is the fraction of inputs that T accepts. Assume first that fJ,{T) < 1/2. Since for a 
random y we have Fry[T{h{y)) = accept] = /u(T) < 1/2, it follows by a ChernofF-type bound that 
Pia[\A n c(T)| > 3/4:\A\] < 2-"/*. However, if |^ n c(T)| < 3/4\A\ then T will be wrong on at least 
1/4 of the positive inputs which is at least n/8 of all inputs. Hence with probability at most 2~"/^, 
T will be correct on at least 7/8 of the inputs. If /i(T) > 1/2 the same reasoning shows that with 
probability of at most 1 — 2~"/* it will err on at least an 1/4-fraction of the negative inputs. Hence in 
total, for every fixed T, Pryi[T is correct on at least 7/8 of the inputs] < 2^"/^. 

Now, let us bound from above the number of algorithms that make at most q queries. As an 
algorithm may be adaptive, it can be defined by 2"^ — 1 query positions (all queries for all branches) 
and a Boolean function / : {0, 1}'^ {accept, reject} of the decision made by the algorithm for the 
possible answers. Hence, there are at most T < (271)^' such algorithms. However, for q < (logn)/2, we 
have r-2~"/® = o(l), which shows that for most A as above, any e-test that queries at most (logn)/2 
many queries has error probability of at least 1/8. Standard amplification techniques then imply that 
any algorithm that queries clogn many queries (for some constant c) has error at least 1/3. □ 



Observation 3.5 Let P C {0, 1}" be a property with \P\ = s then P can be e-tested by a one-sided 
algorithm using 0((logs)/e) many queries. 

We omit the proof from this draft. 

4 An Exponential Separation 

In this section, we show that a quantum computer can be exponentially more efficient in testing certain 
properties than a classical computer. 

Theorem 4.1 There is a languages L that is {€,lognloglogn)-quantumly testable for any e = $1(1). 

However, any probabilistic 1/8-test for L requires n^^^^ queries. 
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The language that we provide is inspired by Simon's problem Sim97[ and our quantum testing algo- 



rithm makes use of Brassard and H0yer's algorithm for Simon 's problem [|BH97l ]. Simon's problem 
is to find s S {0, 1}" \ {0"} from an function-query oracle for some / : {0, l}*^ {0, 1}", such that 
f{x) = f{y) X = y (B s. Simon proved that classically, 1^(2*^/^) queries are required on average to 
find s, and gave a quantum algorithm for determining s with an expected number of queries that is 
polynomial in n; Brassard and H0yer improved the algorithm to worst-case polynomial time. Their 
algorithm produces in each run a z with z ■ s = that is linearly independent to all previously com- 
puted such zs. Essentially, our quantum tester uses this subroutine to try to extract information about 
s until it fails repeatedly. Recently H0yer [ H0yOl| analyzed this approach in group-theoretic terms. 



obtaining an alternative proof to Theorem 4.3 



In the following, let N = 2^ denote the length of the binary string encoding a function / : 
{0, 1}" — > {0, 1}. For X G {0, l}*^ let x[j] be the jth bit of x, i.e., x = x[l] . . . x[n]; the inner product 
of x,y £ {0, 1}" as vectors in F2 is x • y = Yll=i ^[j]y[j] mod 2. We define 



L := {/ G {0, 1}^ : 3s G {0, 1}" \ {0"} Vx G {0, 1}" /(x) = /{x © s)} 



Theorem 4.1 follows from the following two theorems. 



Theorem 4.2 Any classical 1/8-tester for L must make i}{\/N) queries (even when allowing two- 
sided error.) 

Theorem 4.3 There is a quantum property tester for L making 0(log A^loglog A^) queries. Moreover, 
this quantum property tester makes all its queries nonadaptively. 



Proof of Theorem 4.2. We again apply the Yao principle [ Y"ao77| ] as in the proof of Lemma |3.4] : we 



construct two distributions, P and U, on positive and negative (at least A^/8-far) inputs, respectively, 
such that any deterministic (adaptive) decision tree T has error 1/2 — o(l) when trying to distinguish 
whether an input is chosen from U or P. Indeed, we will show a stronger statement: Let T be any 
deterministic decision tree. Let w be a vertex of T. Let Prp{v) and Prjj^v) be the probability the 
an input chosen according to P and U, respectively, is consistent with v. We will show that for any 
vertex v of T \ Pip{v) — Ptu{v)\ = o(l); hence, T has error 1/2 — o(l). 

The distribution P is defined as follows: We first chose s G {0,1}" at random. This defines a 
matching Ms of {0, 1}" by matching x with x (B s. Now a function fs is defined by choosing for each 
matched pair independently fs{x) = fs{x © s) = 1 with probability 1/2 and fs{x) = fs{x © s) = 
with probability 1/2. Clearly, this defines a distribution that is concentrated on positive inputs. Note 
that it might be that by choosing different s's we end up choosing the same function, however, this 
will be considered different events in the probability space. Namely, the atomic events in P really are 
the pairs {s,fs) as described above. 

Now let U be the uniform distribution over all functions, namely, we select the function by choosing 
for each x independently /(x) = 1 with probability 1/2 and with probability 1 /2. Since every function 
has a non zero probability, U is not supported exclusively on the negative instances. However, as we 
proceed to show, a function chosen according to U is A^/8-far from having the property with very high 
probability, and hence U will be a good approximation to the desired distribution: 

Definition 4.4 For f : {0, 1}" ^ {0, 1} and s G {0, 1}" we define Us := \{x : f{x) = f{x © s)}\. 

Lemma 4.5 Let f he chosen according to U . Then Frij[3s G {0, 1}" : Ug > N/8] < exp{—0,{N)). 

Proof. Let / be chosen according to U and s G {0, 1}". By a Chernoff bound we obtain Pr[/[ns > 
N/8] < exp(—0,{N)). Together with the union bound over all s's this yields Pr[/[3s G {0, 1}" : Ug > 
iV/8] < 2" • exp{-n{N)) < exp(-0(iV)). □ 
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In particular, a direct consequence of Lemma 4.5 is that with probabihty 1 
chosen according to U will be A^/8-far from having the property. 
From the definition of U, we immediately obtain the following: 



— exp{—Q{N)) an input 



Lemma 4.6 Let T be any fixed deterministic decision tree and let v he a vertex of depth d in T. Then 
Pr;7[/ is consistent with the path to v] = 2~'^ . 

We now want to derive a similar bound as in the last lemma for functions chosen according to P. For 
this we need the following definition for the event that after d queries, nothing has been learned about 
the hidden s: 

Definition 4.7 Let T he a deterministic decision tree and u a vertex in T at depth d. We denote the 
path from the root ofT to u hy path(n). Any vertex v inT defines a query position Xy £ {0, 1}". For 
f = fs chosen according to P, we denote by the event Bu ■= {{s,fs) ■ s / for all v,w G 

path(n)}. 



Lemma 4.8 Let v be a vertex of depth d in a decision tree T. Then Ptp[B^] > 1 - (^^2^) /N 

Proof. Bjj does not occur if for some v, w on the path to v we have s = x^j (B Xw As there are d — 1 
such vertices, there are at most ('^2^) pairs. Each of these pair excludes exactly one s and there are 
N possible s's. □ 



Lemma 4.9 Let v be a vertex of depth d in a decision tree T and let f be chosen according to P. 
Then Prp[/ is consistent with v\By] = 2~'^. 

Proof. By the definition of P, f gets independently random values on vertices that are not matched. 
But if By occurs, then no two vertices along the path to v are matched and hence the claim follows. 

□ 



Now we can complete the proof of the theorem: assume that T is a deterministic decision tree 
of depth d = o{^/N) and let v be any leaf of T. Then by Lemmas 4^ and we get that 
Prp[/ is consistent with v] = (1 — o(l))2~'^. On the other hand, let U' be the distribution on negative 
inputs defined by U conditioned on the event that the input is at least A^/8-far from the property. 

and hence T has 



Then by Lemmas 4.5 and 4.f: we get that Pr^/[/ is consistent with v] = (1 — o(l))2 
only 0(1) bias of being right on every leaf which directly imply that its error probability is 1/2 



o(l). 



□ 



Proof of Theorem |4.3| . We give a quantum algorithm making O (log A'^ log log A^) queries to the 
quantum oracle for input / S {0, 1}^. We will show that it accepts with probability 1 if / G L and 
rejects with high probability if the Hamming distance between / and every g G L is at least eA^. 
Our algorithm, given in Figure |l|, consists of a classical main program and a quantum subroutine Q 
adapted from Brassard and H0yer's algorithm for Simon's problem [BH97, Section 4]. The quantum 

gates used are the 2"-dimensional Hadamard transform which applies I\f2 individually 

to each of n qubits, the quantum oracle query O/, and classical reversible operations run in quantum 
superposition. 

The following technical lemma captures the operation of the quantum subroutine Q. Essential 
proofs to this and later lemmas are included in the appendix. 
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Main Program 
for A; = to n — 1 do 
I ^ 
repeat 

z ^ Q{zi, ... ,Zk) 

l^l + l 
until z=^OoT l> 2(log7T,)/e2 
if 2 = then 

accept 
else 

Zk+l ^ z 

reject 



Subroutine Q 

input: zi,... ,Zke {0,1}" 

output: z e {0, 1}" 

quantum workspace: X y Z 

(where ^ is n qubits A" = (g) • • • (g) = 

^ = is one qubit, and 

Z is k qubits Z = Z\® ■ ■ ■ ® Z^., Zj = C^) 

initiahze the workspace to lO") 10)10*^) 

apply if2" to X 

apply Of to X (g,y 

apply i?2" to X 

for j = 1 to A; do 

i ^ min{?' : Zj[i] = 1} 

apply CNOT with control Xi and target Zj 
apply \x) 1-^ \x ® Zj) to X conditional on Zj 
apply H2 to Zj 
return measurement of X 



Figure 1: The Quantum Property Tester 

Lemma 4.10 When Q is passed k linearly independent vectors zi,... ,Zk so that all ij := min{i : 
Zj[i\ = 1} are distinct for 1 < j < k, then the state before the measurement is 

1^)^=^ E E (-ir^i2/)i/(^))k-^i)---k-^fe)- 

xe{o,i}" ye{o,i}" 
y[ij]=0\/j<k 

As an immediate consequence, we can establish the invariant that in the main program {zi, ... ,Zk} 
always is linearly independent with ij = min{z : Zj[i] = 1} distinct for 1 < j < k; moreover, if / G -L, 
then just as in Simon's algorithm, a nonzero z is orthogonal to the hidden s: 

Lemma 4.11 If measuring the first register, X, yields a nonzero value z, then 

1. {zi, ... , Zfc, 2:} is linearly independent, 

2. min{i : z[i] = 1} is distinct from ij for I < j < k, and 

3. if f & L, then z ■ s = for any s such that f{x) = f{x © s) for all x. 

Next, we want to assess the probability of obtaining z = in the main loop. We let Pq denote the 
projection operator mapping |0)|y)|2;) |0)|y)|z) and |x)|y)|2;) for x 7^ 0; hence, Hi-ol^/")!]^ is the 
probability of obtaining when measuring subspace X of the quantum register in state We can 
characterize the probability for outcome 2; = in terms of the following definition and lemma: 

Definition 4.12 For c G {0, l}'^ and zi, . . . , £ {0, 1}" we define Dc := {x G {0, 1}" : x ■ zi = 
c[l],... ,x- Zk = c[k]}. 

Lemma 4.13 Let he the state before the measurement in Q, when Q is passed k linearly indepen- 
dent vectors zi, . . . ,Zk so that all ij := min{i : Zj[i] = 1} are distinct for 1 < j < k. 

1. ||Po|V')lP = 1 */ o,'f>'d only if for every c G {0, l}'^, / is constant when restricted to Dc. 



7 



2. If IIPqIV')!!^ ^ 1 then f differs in at most eN points from some function g that is constant 

when restricted to Dc for every c G {0, l}'^. 

We need to relate these two cases to membership in L and bound the number of repetitions needed 
to distinguish between the two cases. This is achieved by the following two lemmas. 

Lemma 4.14 Let k be the minimum number of linearly independent vectors zi, . . . , so that for 
each c G {0, l}'^, / is constant when restricted to Dc- Then f ^ L if and only if k < n. 



Lemma 4.15 Let < q < 1, and ■ ■ ■ , \(j)m) be quantum states satisfying ||Po|0j)|P < 1 — 5 for 

1 < j < m. If m = logg/log(l — 5) = Q{—\ogq/5), then with probability at most q measuring the X 
register of\(f)i), ... , yield m times outcome 0. 



Proof. Pr [m times |Vj : ||Po| 



< 1 - 5] < (1 - <5)"^ = (1 - 5) 



log q/ log(l-(5) 



□ 



Now all the ingredients for wrapping up the argument are at hand; first consider f £ L. Let S := 
{s : f{x) = f{x © s) Vx} be the set of all "Simon promises" of /, and S-^ := {z : z ■ s = Vs £ S} 



the vectors that are orthogonal to all such promises. By Lemma 4.11 the nonzero z computed by the 
algorithm lie in and are linearly independent, therefore after dimS'-'" rounds of the main loop, we 
measure z = with certainty. Since f £ L, dimS > and thus dimS*^ < n. 



If / is en-far from being in L, then by Lemma 4.14 / is en-far from being close to a function 
for which a, k < n and zi 
c e {0, 1}^- 



Zk 



Therefore, by Lemma 4.13 case ^, for all k < n, \\Pq 
guarantees that we accept with probability at most 1/3 if we let q 



exist so that / is constant when restricted to Dc for any of the 

2 < 1 - e^/2. Thus, Lemma ^.15 



l/(3n) and thus m < 2(logn)/e 



□ 



5 Quantum Lower Bounds 

In this section we prove that not every language has a quantum property tester. 

Theorem 5.1 Most properties containing 2"/^'^ elements of {0, 1}" require quantum property testers 
using 0(n) queries. 

Proof. Fix n, a small e, and a quantum algorithm A making q := n/400 queries. Pick a property 
P as a random subset of {0, 1}" of size 2"/-^*'. Let := {y : d{x,y) < en for some x G P}; using 
Efe=o (fc) ^ 2^^'-'" where H{e) = -eloge-(l-e) log(l-e), we obtain |P,| < 2{V20+//(e))n_ order for 
A to test properties of size 2"/^'^, it needs to reject with high probability on at least 2" — 2(^/2'^+^('^))" 
inputs; but then, the probability that A accepts with high probability on a random x G {0, 1}" is 
bounded by 2^^^'^^^^^''^^"' /2"' and therefore the probability that A accepts with high probability on |P| 
random inputs is bounded by 2-(i-V20-H(.))n|P| ^ ^-2"/^o+eM _ 

We would like to sum this success probability over all algorithms using the union bound to argue 
that for most properties no algorithm can succeed. However, there is an uncountable number of possible 
quantum algorithms with arbitrary quantum transitions. But by Beals, Buhrman, Cleve, Mosca, and 



de Wolf |BBC+95], the acceptance probability of j4 can be written as a multilinear polynomial of degree 



at most 2q where the n variables are the bits of the input; using results of Bennett, Bernstein, Brassard, 



and Vazirani | BBBV97 ] and Solovay and Yao | SY9G \ , any quantum algorithm can be approximated by 



another algorithm such that the coefficients of the polynomials describing the accepting probability are 
integers of absolute value less than 2"°^^' over some fixed denominator. There are less than 2"-'^(^''/"') 
degree 2q polynomials in n variables, thus we can limit ourselves to 2"-°^^'2"^(^''/") ^ c^^l'^^ 9i/ioo+e(iogn) 
algorithms. 

Thus, by the union bound, for most properties of size 2"/^^^, no quantum algorithm with q queries 
will be a tester for it. □ 
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We also give an explicit natural property that requires a large number of quantum queries to test. 



Theorem 5.2 The range of a d-wise independent pseudorandom generator requires (d+l)/2 quantum 
queries to test for any odd d < n/logn — 1. 

We will make use of the following lemma: 

Lemma 5.3 (see [ ABI86( |) Suppose n = 2^ — 1 and d = 2t + 1 < n. Then there exists a uniform 



probability space of size 2(n + 1) and d-wise independent random variables ... , over $7 each 
of which takes the values and 1 with probability 1/2. 



The proof of Lemma |5.3| is constructive and the construction uniform in n; for given n and d, consider 
the language P of bit strings £,{z) := ^1(2:) . . . £,n{z) for all events z E = {1, . . . , 2(n+l)*}. Classically, 
deciding membership in P takes more than d queries: for all d positions ii, ... , id and all strings 
vi . . .Vd ^ {0, 1}'^ there is an z such that £,i^{z) . . . ^i^{z) = vi . . . v^,. On the other hand, [log + 1 = 
O(dlogn) queries are always sufficient. 



Proof of Theorem 5^. A quantum computer deciding membership for x G {0, l}*^ in P := {^{z) : 
z 0,} with T queries gives rise to a degree 2T approximating (multilinear n-variable) polynomial 
p{x) = p{xi, . . . ,Xn) (see | BBC"'"9^ .) We show that there must be high-degree monomials in p by 



comparing the expectation of p{x) for randomly chosen x S {0, 1}" with the expectation of p{x) for 
randomly chosen x £ P. 

For uniformly distributed x £ {0,1}", we have E[p(a;)|a; G P] > 2/3 and E[p(x)|x ^ P] < 1/3. 
Since of \P\ = o(2"), E[p{x)] < 1/3 + o(l) and thus A := E[p{x)\x £ P] - E[p(x)] > 1/3 - o(l). 
Considering p{x) = ^^ajmj(x) as a linear combination of n-variable multilinear monomials mi, we 
have by the linearity of expectation E[p(a;i, . . . , Xn)] = Yli '^i E[m-i(xi, . . . , Because of the d-wise 
independence of the bits of any x £ P, for any rui of degree at most d holds E[mj(a;)] = E[mj(2;)|a; G P]. 
Since A > 0, p must comprise monomials of degree greater than d. Hence, the number of queries T is 
greater than d/2. 

This proof extends in a straightforward manner to the case of testing the property P: let again 
P, := {y : d{x,y) < en for some x G P}. Then \P,\ < 2^(^)"|P| = 0(2^(^)"+'^i°g"), so E[p{x)] = 
|Pe|/2"E[p(x)|x G Pe] + (1 - |Pe|)/2"E[p(x)|x ^ P^] < 1/3 + o(l) for any d = n/logn - u;(l/logn) 
and any e with H(e) = 1 — u;(l/n). □ 

6 Further Research 

Our paper opens the door to the world of quantum property testing. Several interesting problems 
remain including 

• Can one get the greatest possible separation of quantum and classical property testing, i.e., is 
there a language that requires J7(n) classical queries but only 0(1) quantum queries to test? 

• Are there other natural problems that do not have quantum property testers? We conjecture 
for instance that the language {uuvv : u,v £ T,*} does not have a quantum property tester. 



Beals, et. al. [BBC'^DSl observed that any /c-query quantum algorithm gives rise to a degree-2A; 
polynomial in the input bits, which gives the acceptance probability of the algorithm; thus, a 
quantum property tester for P gives rise to a polynomial that is on all binary inputs between 
and 1, that is at least 2/3 on inputs with the property P and at most 1/3 on inputs far from 
having the property P. Szegedy [ Sze9S| ] suggested to algebraically characterize the complexity of 



classical testing by the minimum degree of such polynomials; as mentioned in the introduction, 
our results imply that this cannot be the case for classical testers. However, it is an open question 
whether quantum property testing can be algebraically characterized in this way. 
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We hope that further research will lead to a greater understanding of what can and cannot be tested 
with quantum property testers. 
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A Appendix 



Proof of Lemma |4.1C . We follow the steps of subroutine Q when passed k linearly independent 



vectors zi, . . . ,Zk so that all ij := min{i : Zj[i] = 1} are distinct for 1 < j < k. 

io-)|o)|o'=)^^ 1^)10)10'=) ^-L ^ |^)|/(^))|o'=)^l Yl i-ir'mmo' 

^ xe{o,i}" ^ xe{o,i}" x,i/G{o,i}" 

This is the state before the for loop is entered. We claim (and proceed to show by induction) that 
after the Jth execution of the loop body, the state is 



^"^ E E {-iy'\y)\f{x))\x-z,)...\x-zj)\Q'-^) 



N 

xe{o,i}" 3/e{o,i}" 

y[ij]=0\lj<J 
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Executing the body of the loop for j = J + 1 
V2J 



{-ir'\y)\m)\x-z,)...\x-zjm\0' 



k-J-l\ 



N 

x€{o,i}" j/e{o,i}" 
y[ij]=o^j<J 



-W ^ ^ (-ir^|y)|/(:r))|x-zi)---|x-zj)|yfe-+i])|0'=~^-i) = 

xG{o,i}" ye{o,i}" 

J/[ij]=OVi<J 

]^ E E E (-ir^^®''^^+^)|2/©6zj+i)|/(x))|x.zi)---|x-zj)|6)|0^-^-i) 

xG{0,l}" feG{0,l} s/e{o,i}" 

y[ij]=OVj<J+l 



ir E E E (-ir(^®'^^+^^iy)i/(x))ix-zi)---|x-zj)i6)|o^-^-i) = 

a;G{o,i}" 6e{o,i} ye{o,i}" 

y[i^.]=OVi<J+l 

E E (-ir^iy)i/(^))ix-.i)---k-^j)^ E (-ir('^'^+^)|6)io'^-'-^) 

xe{o,i}" y6{o,i}" bG{o,i} 

y[ij]=OVj<J+l 

E E (-ir^iy)i/(^))k-zi)---k-^j+i>io'^-M 

xG{0,l}" yG{0,l}" 

?/fe]=OVi<J+l 



□ 



Proof of Lemma \i.l3[ For 6 G {0, 1} let Db,c ■= Dc n f'^{b} = {x : f{x) = b and x ■ zi = 
c[l], ... ,x-Zk = c[k]}. Note that the Dh^c and Dc also depend on zi, . . . , Zk and the Dh^c depend on 
/. Let 



i^o)^=^ E mf{x))\x-z^)...\x-z,) = ^ Yl E \Dt,c\mmi])---\c[ 

a::G{0,l}" bG{0,l} cejO,!}* 



By Lemma 4.10, at the end of Q, the system is in state 



\^p) = m + ^ Y E {-in)\f{x))\x-z^)...\x-z,). 

xe{o,i}" »/e{o,i}"\{o} 

y[ij]=OVj<k 

We consider the case ||Po|V')lP = 1- Then the register X must be in state |0) and thus {ip) = \tpo)- 
Since the state has norm 1, we know that 

E E \^^.\' = ^- (1) 

The Db^c partition {0, 1}" and the Dc = Dq c U Di^c have the same size for all c G {0, l}'^ (because 
they are cosets of Dq-) Therefore, 

Y E 1^6,^1=^ and |L)o,c| + |I?i,c| = ^forallcE{0,lf. (2) 

6e{o,i}ce{o,i}'= 



12 



|-Do,cP + |-Di,cP < N"^ /2^^, but in order for equation (|l]) to hold, |-Do,cP + l-^i^cP rnust be exactly 
N"^ /2'^^ . This can only be achieved if either Z)o,c or Di^c is empty. So / must be constant when 
restricted to Dc for any c E {0, l}'^. Conversely, if / is constant when restricted to Dc for any 
c G {0, 1}^, then equation (||) holds, therefore |||V'o)|| = 1 and \ip) = |V'o)- This concludes the proof of 
case m of the lemma. 

If llPolV')!!' = lllV'o)f >l-5, then 

E E iA,ci^>(i-'^)^ (3) 

feG{o,i}ce{o,i}'= 

Stih, the constraints @j hold; let r2'^ be the number of c G {0, l}'^ so that min{|L)o,c|, |-Di,c|} > 
Then 

E E |Z^.,cP<r2V + (1-7)^)^ + (1-02'=^, 

and using (|^, we obtain r < (5/(1 — 7^ — (1 — 7)^). With (5 = and 7 = e/2, this implies r < e. 
But then 

E min{|Z)o,c|, |I)i,c|} < r2'=^ + (1 - r)2S^ < eiV 

cG{0,l}''- 

□ 



Proof of Lemma 4.14. If k < n, then there exists an s with s ■ zi = 0, . . . , s ■ Zk = 0. For any 

such s and any x, we have x • zi = {x (B s) ■ zi, . . . ,x-Zk = {x (B s) ■ Zk and x G .x-z^. and 

x©s G £'/(a;es),x-^i,...,a;-2fc, therefore /(x) = /(x©s). Conversely, for f e L, S := {s : Vx/(x) = /(x©s)} 
is a non-trivial subspace of {0, 1}", therefore S-^ = {z : z-s = OVs G S} is a proper subspace of {0, 1}". 
Let zi, . . . , Zk he any basis of S-^. □ 
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